Experience the role. Master the work.
What the film shows
- A woman works at a laptop at her desk at home, then a man works on his laptop on the sofa.
- A man walks between glass office buildings, then a woman with a coffee arrives at an office entrance and looks up.
- A team talks around a table in an office, a man smiles by an office window, and a woman in a blazer works at her laptop.
- A light sweeps across the 3D Rolevara door R, with warm light in the doorway, then the Rolevara logo and tagline.
Job simulator for IAM, GRC and PAM
Know you can do the job before you get it.
Work a realistic identity service desk and audit team. Set up and remove access, run access reviews, contain compromised accounts and prepare audit evidence, then see how every decision holds up.
- 20
- 13
- 10
- 131
Video description
- The queue has one ticket left: a caller claiming to be the CFO wants MFA moved to a new phone before a wire deadline.
- The analyst starts work and opens the first hint, which costs 10% of the ticket's score.
- The caller's employee ID (10020) doesn't match the directory (10002), so the ticket is escalated to the Security team and rejected.
- The ticket is graded 9 out of 10: every check passes, less the hint penalty.
- Later in the shift, a stale account left enabled earlier has been used in a password spray, and lands in the queue as a new incident traced back to that decision.
- Joiner / mover / leaver
- Access reviews
- Separation of duties
- Incident response
- Privileged access (early access)
- Microsoft Entra ID (early access)
- SOX ITGC
- NIST 800-53
- SOC 2
- ISO 27001
- CMMC (early access)
- HIPAA (early access)
- GLBA (early access)
- PCI DSS (early access)
How it works
Learn by doing the actual job.
One company, one live service desk queue. No slides, no multiple choice.
Step 1: Take a ticket
Requests arrive from HR, phone calls, security alerts and access reviews, just like a real service desk.
Step 2: Do the work
Enable, disable, reset, change groups and job data, set expiry dates, revoke sessions or escalate.
Step 3: Get graded
Every ticket is scored on the outcome and the process, with the control behind each decision.
Step 4: Live with the results
Tickets stay open until they're actually fixed. Miss something and the requester replies, or it comes back as an incident. The GRC track then audits the shift.
Paths
Choose your path
Pick a path when you open the app and switch any time. Each path keeps its own progress, and all three are free.
IAM
Work the Pacific Crest service desk: joiners, movers and leavers, caller verification, access requests and compromised accounts. Tickets stay in the queue until they're actually fixed.
- IAM only
- Work the queue until it's clear, then a shift summary.
- IAM + GRC
- The same shift, then an optional audit of your own work.
GRC
Take the auditor's side: walkthrough, sampling, control testing, evidence, findings, risk ratings and management's response, with the NIST, HIPAA, ISO 27001, SOC 2 and PCI DSS requirements behind each decision.
- GRC only
- Audit Jordan Reyes, a simulated IAM analyst whose shift includes realistic mistakes.
- IAM + GRC
- Audit the shift you just worked on the desk.
PAMEarly access
Just-in-time elevation, break-glass accounts, credential rotation and privileged session review.
- In development
- PAM joins the paths as it's released.
What you'll practise
The work employers hire for.
Every scenario is graded on what you did and how you did it, and mapped to the controls auditors test.
Provisioning and lifecycle
Set up, change and remove access for joiners, movers, leavers and rehires, using the company's role-based access matrix.
Access reviews and SoD
Spot separation-of-duties conflicts, revoke what a review flags and approve requests with a clear paper trail.
Privileged accessEarly access
Grant just-in-time admin rights, handle break-glass accounts and review privileged sessions.
Incident response
Contain compromised accounts, MFA fatigue attacks and activity from people who have already left.
Audit readiness
Test provisioning, termination and review controls against the audit log of the shift you just worked.
Coached, not handed answers
Hints cost points, and the tutor asks the questions a senior colleague would instead of giving the answer away.
Companies
Six companies. Six rulebooks.
Each company has its own applications, access matrix, separation-of-duties rules and regulations, so no two shifts feel the same.
Pacific Crest Logistics
SOX ITGC, NIST 800-53
- Early access
Harbor Health Network
HIPAA Security Rule
- Early access
Meridian Aerospace
CMMC Level 2, NIST SP 800-171
- Early access
Coastline Credit Union
GLBA Safeguards Rule, NCUA Part 748, FFIEC
- Early access
Brightpath SaaS
SOC 2
- Early access
Sunset Retail Group
PCI DSS v4.0, SOX ITGC
Who it's for
Built for every step of an identity career.
- Moving into identity
- Find out what the job really involves, and prove to yourself you can do it before you apply.
- Service desk and IT support
- Build the habits that get you promoted: verify first, provision from the role, remove what the old role granted.
- IAM analysts and engineers
- Rehearse rehires, service accounts and SoD conflicts before they reach production.
- GRC, audit and compliance
- See controls from the operator's side, then test them against real evidence.
Pricing
Start free. Upgrade for every company, track and lab.
Paid plans open from a waitlist. No payment details are collected.
Free
The complete Pacific Crest Logistics scenario.
- Pacific Crest Logistics (logistics)
- All three paths: IAM only, IAM + GRC, and GRC only
- A live ticket queue: requesters reply when a fix fails, and missed work returns as incidents
- Self-audit of your own shift, and a GRC-only audit of a simulated analyst
- Framework panels: NIST, HIPAA, ISO 27001, SOC 2 and PCI DSS
- Basic hints
Pro
The realistic simulator: every industry scenario, every track and full coaching.
14-day free trial · Cancel anytime
- Everything in Free
- Industry companies: Harbor Health Network, Meridian Aerospace, Coastline Credit Union, Brightpath SaaS, Sunset Retail Group Early access
- PAM track Early access
- Full hints and guided tutor
- Shareable readiness report
Pro + Labs
The simulator plus real tenants. Practice in the consoles employers use.
Cancel anytime
- Everything in Pro
- Labs in Microsoft Entra ID, Okta and AWS, in free tenants you own Early access
- Your console work graded automatically, ticket by ticket Early access
- A GitHub portfolio project for every lab Early access
- Each lab added as a line on your readiness report Early access
- Aligned to SC-300, Okta and AWS Security certifications Early access
FAQ
Common questions
Early access
Be first to try new companies and labs.
Get one email each time a new company, the PAM track or a platform lab is released. No payment details needed.